2858 matches found
CVE-2025-13622: Improper Neutralization of Input During Web Page Generation
The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATHINFO in all versions up to, and including, 0.99-RC2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
CVE-2025-60646: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...
CVE-2025-12471: Improper Neutralization of Input During Web Page Generation
The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsplistattentionsearch' parameter in all versions up to, and including, 1.36.0 due to insufficient input sanitization and output escaping. This makes it...
CVE-2025-12017: Improper Neutralization of Input During Web Page Generation
The VNPAY Payment gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
PT-2025-43057
Name of the Vulnerable Software and Affected Versions Responsive Progress Bar plugin for WordPress versions prior to 1.1 Description The Responsive Progress Bar plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s rprogress shortcode. This is due to inadequate...
PT-2025-43054
Name of the Vulnerable Software and Affected Versions Material Design Iconic Font Integration versions prior to 3 Description The plugin is susceptible to Stored Cross-Site Scripting through the 'mdiconic' shortcode due to inadequate input sanitization and output escaping of user-provided...
CVE-2020-36853: Improper Neutralization of Input During Web Page Generation
The 10WebMapBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Plugin Settings Change in versions up to, and including, 1.0.63 due to insufficient input sanitization and output escaping and a lack of capability checks. This makes it possible for unauthenticated attacker...
EUVD-2021-24794
Malware in sbrugna...
EUVD-2021-24783
Malware in sbrugna...
EUVD-2021-24810
Malware in sbrugna...
EUVD-2021-25680
Malware in sbrugna...
EUVD-2020-24146
Malware in sbrugna...
EUVD-2021-21281
Malware in sbrugna...
EUVD-2021-24805
Malware in sbrugna...
EUVD-2020-15962
Malware in sbrugna...
EUVD-2021-21299
Malware in sbrugna...
EUVD-2021-21317
Malware in sbrugna...
EUVD-2021-24773
Malware in sbrugna...